zlacker

>>jfreax+(OP)
I remember reading a discussion a couple of years back where somebody wondered why Microsoft did not go a similar route for Windows. The original context was backwards compatibility with applications written for older releases of Windows.

But given the general security situation on Windows, it would be really nice to have, for example, the browser strongly isolated from the rest of the system.

The idea of using virtualization to enforce stronger isolation between different parts of the system seem like a good one, and it does not appear to be that non-obvious (of course, in hindsight so many things do).

>>krylon+wj
Bromium (https://www.bromium.com/) is a commercial product that does basically this on Windows, and is also based on Xen.

https://www.bromium.com/advanced-endpoint-security/our-techn...